CVE-2021-44879CWE-476

CVE-2021-44879

Medium · published February 14, 2022

CVSS v3.1
5.5
EPSS
1%
Percentile
73.8
In the wild
Unconfirmed
What it is

In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01482 · 73.8th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2022-02-14T17:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel< 5.16.35.16.3
References (16)
https://bugzilla.kernel.org/show_bug.cgi?id=215231 · [email protected]https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 · [email protected]https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9056d6489f5a41cfbb67f719d2c0ce61ead72d9f · [email protected]https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html · [email protected]https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html · [email protected]https://lore.kernel.org/linux-f2fs-devel/20211206144421.3735-3-chao%40kernel.org/T/ · [email protected]https://bugzilla.kernel.org/show_bug.cgi?id=215231 · af854a3a-2127-422b-91ae-364da2661108https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9056d6489f5a41cfbb67f719d2c0ce61ead72d9f · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html · af854a3a-2127-422b-91ae-364da2661108https://lore.kernel.org/linux-f2fs-devel/20211206144421.3735-3-chao%40kernel.org/T/ · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-613116.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-831302.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 13 FEB 00:00Z
    In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference
    cvelistv5